Advanced Keycloak Mcp Server
@Octodet
About Advanced Keycloak Mcp Server
Advanced Keycloak Mcp Server with many tools
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"keycloak": {
"command": "npx",
"args": [
"-y",
"@octodet/keycloak-mcp"
],
"env": {
"KEYCLOAK_URL": "http://localhost:8080",
"KEYCLOAK_ADMIN": "admin",
"KEYCLOAK_ADMIN_PASSWORD": "admin"
}
}
}
}Tools
7Create a new user in a specific realm
Delete a user from a specific realm
List all available realms
List users in a specific realm
List all roles of a specific client in a specific realm
Add and/or remove client roles for a user in a specific realm and client
Reset or set a new password for a user in a specific realm
Overview
What is Advanced Keycloak Mcp Server?
A Model Context Protocol (MCP) server that provides a comprehensive set of tools for Keycloak administration, covering user, realm, and role management. It is intended for developers and administrators who need to automate Keycloak tasks via MCP-compatible clients.
How to use Advanced Keycloak Mcp Server?
The README does not describe installation, configuration, or invocation steps. Once set up, the server exposes tools such as create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, which accept JSON parameters as shown in the documentation.
Key features of Advanced Keycloak Mcp Server
- Create users in specified realms with credentials and attributes.
- Delete users permanently from a realm.
- List all users in a realm with basic information.
- Display all available realms in the Keycloak instance.
- List all roles for a specific client within a realm.
- Add or remove client roles for a user in a single operation.
Use cases of Advanced Keycloak Mcp Server
- Automate user provisioning and deprovisioning across multiple realms.
- Manage role-based access control for applications by assigning/removing client roles.
- Audit and explore Keycloak realms, users, and role assignments via MCP tools.
- Integrate identity management workflows into AI assistants or automation pipelines.
FAQ from Advanced Keycloak Mcp Server
What tools does the server provide?
The server provides six tools: create-user, delete-user, list-users, list-realms, list-roles, and update-user-roles, each for specific Keycloak administrative tasks.
What parameters are required for create-user?
realm, username, email, firstName, and lastName are required. Optional parameters include enabled, emailVerified, and credentials (an array of credential objects with type, value, and temporary).
Can roles be added and removed in one call?
Yes. The update-user-roles tool accepts both rolesToAdd and rolesToRemove arrays in a single operation. At least one of the two must be provided.
Is the delete-user operation reversible?
No. Deleting a user is permanent and irreversible. The README explicitly warns to ensure the correct userId before execution.
Does the server require any specific transport or authentication setup?
The README does not specify transport, authentication, or runtime dependencies. It assumes a Keycloak instance is accessible and configured for the server.
Frequently asked questions
What tools does the server provide?
The server provides six tools: `create-user`, `delete-user`, `list-users`, `list-realms`, `list-roles`, and `update-user-roles`, each for specific Keycloak administrative tasks.
What parameters are required for create-user?
`realm`, `username`, `email`, `firstName`, and `lastName` are required. Optional parameters include `enabled`, `emailVerified`, and `credentials` (an array of credential objects with `type`, `value`, and `temporary`).
Can roles be added and removed in one call?
Yes. The `update-user-roles` tool accepts both `rolesToAdd` and `rolesToRemove` arrays in a single operation. At least one of the two must be provided.
Is the delete-user operation reversible?
No. Deleting a user is permanent and irreversible. The README explicitly warns to ensure the correct `userId` before execution.
Does the server require any specific transport or authentication setup?
The README does not specify transport, authentication, or runtime dependencies. It assumes a Keycloak instance is accessible and configured for the server.
Basic information
More Other MCP servers
Production-ready MCP integrations for AI applications
Klavis-AIKlavis AI: MCP integration platforms that let AI agents use tools reliably at any scale
MCP Go 🚀
mark3labsA Go implementation of the Model Context Protocol (MCP), enabling seamless integration between LLM applications and external data sources and tools.
Blender
ahujasidOpen-source MCP to use Blender with any LLM
EverArt
modelcontextprotocolModel Context Protocol Servers
Lemon.io
lemon-ioRequest dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3
Comments